Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: CISA KEV Additions: Arista VeloCloud and FortiOS Flaws Now Exploited
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 21:52:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arista #CISA KEV #CVE_2025_68686 #CVE_2026_16812 #Fortinet #FortiOS #Known Exploited Vulnerabilities #os command injection #SSL VPN #VeloCloud Orchestrator
Daily CyberSecurity
CISA KEV Additions: Arista VeloCloud and FortiOS Flaws Now Exploited
TL;DR: On July 27, 2026, CISA made two KEV additions. Both are known exploited vulnerabilities. One is a critical Arista VeloCloud RCE, while the other is a FortiOS persistence bypass. Why These C…
18 views
Daily Writeups
⤷ Title: Mobile Malware Analysis: 10 Tools to Reverse Android & iOS Apps Like a Pro
════════════════════════
𐀪 Author: Very Lazy Tech
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 20:01:27 GMT
════════════════════════
⌗ Tags: #python #hacking #cybersecurity #bug_bounty #cyber
Medium
Mobile Malware Analysis: 10 Tools to Reverse Android & iOS Apps Like a Pro
Ever opened a seemingly innocent app, only to discover it’s secretly siphoning your data or dialing premium-rate numbers behind your back…
14 views
Daily Writeups
⤷ Title: Death Note — Exploited Authentication & Privilege Escalation vulnerabilities to compromise a server
════════════════════════
𐀪 Author: CyberLabyrinthX
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 21:05:06 GMT
════════════════════════
⌗ Tags: #vulnhub_walkthrough #hacking #tryhackme_walkthrough #cyber_security_awareness #web_hacking
Medium
Death Note — Exploited Authentication & Privilege Escalation vulnerabilities to compromise a server
In this WordPress penetration test activity, I used the KISS (“Keep it simple, stupid”) principle to compromise an administrative account…
15 views
Daily Writeups
⤷ Title: Is Your Phone Near Your Keyboard? Because It Might Be Listening to Every Word You Type
════════════════════════
𐀪 Author: Berend Watchus
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 21:32:39 GMT
════════════════════════
⌗ Tags: #privacy #spying #cybersecurity #infosec #ai
Medium
Is Your Phone Near Your Keyboard? Because It Might Be Listening to Every Word You Type
A new acoustic side-channel attack turns keystroke sounds into text — and the recorder in its best-case scenario is the phone you put on…
13 views
Daily Writeups
⤷ Title: TryHackMe | Attacktive Directory
════════════════════════
𐀪 Author: Tabrizabuzarov
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 21:44:02 GMT
════════════════════════
⌗ Tags: #penetration_testing
Medium
TryHackMe | Attacktive Directory
Salam bir daha bu gün daha bir CTF işləyəcəm.
20 views
Daily Writeups
⤷ Title: TryHackMe XSS Introduction Walkthrough
════════════════════════
𐀪 Author: Rich
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 20:47:05 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_writeup #cross_site_scripting #tryhackme_walkthrough #web_application_security
Medium
TryHackMe XSS Introduction Walkthrough
TL;DR Walkthrough of the TryHackMe room XSS Introduction.
25 views
Daily Writeups
⤷ Title: Too Many AI Tools? How to Create Story Videos In One Workflow With Wondershare Media.io
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 22:56:11 +0000
════════════════════════
⌗ Tags: #Technology #AI #Media.io #Video #Wondershare
Hackread - Cybersecurity News, Data Breaches, AI and More
Too Many AI Tools? How to Create Story Videos In One Workflow With Wondershare Media.io
Follow us on all major social media platforms @Hackread
11 views
Daily Writeups
⤷ Title: JWT Security: 12 Mistakes Developers Still Make
════════════════════════
𐀪 Author: Ismail Tasdelen
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 23:21:18 GMT
════════════════════════
⌗ Tags: #cybersecurity #encryption #software_development #software_engineering #application_security
Medium
JWT Security: 12 Mistakes Developers Still Make
JSON Web Tokens (JWTs) have become the de facto standard for stateless authentication in modern web applications. They are compact…
16 views
Daily Writeups
⤷ Title: The captive portal problem: your free-WiFi timer was never really counting you
════════════════════════
𐀪 Author: Alex Nebot Oller
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 23:44:41 GMT
════════════════════════
⌗ Tags: #cybersecurity #network_security #technology #infosec
Medium
The captive portal problem: your free-WiFi timer was never really counting you
What device-based session tracking actually checks, and why it’s weak
15 views
Daily Writeups
⤷ Title: Linux Privilege Escalation: Enumeration | Tryhackme Walkthrough | Anon.M | THM
════════════════════════
𐀪 Author: Anon.M
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 23:47:12 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme #linux_tutorial #cybersecurity #tryhackme_walkthrough
Medium
Linux Privilege Escalation: Enumeration | Tryhackme Walkthrough | Anon.M | THM
Task 1: Introduction
24 views
Daily Writeups
⤷ Title: How I Turned an “Informative” HTML Injection into My First Paid Bounty
════════════════════════
𐀪 Author: Muhammadmaftuhk
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 23:57:41 GMT
════════════════════════
⌗ Tags: #web_security #html_injection #bug_bounty #bug_bounty_writeup #cybersecurity
Medium
How I Turned an “Informative” HTML Injection into My First Paid Bounty
TL;DR: HTML Injection is often marked as Informative or N/A by triagers. However, by demonstrating how a hidden CSS overlay bypassed the…
25 views
Daily Writeups
⤷ Title: Inside a DevSecOps CI/CD Pipeline: How Automated Security Checks Protect Every Commit
════════════════════════
𐀪 Author: Lh1l0v3
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 00:11:56 GMT
════════════════════════
⌗ Tags: #application_security #cloud_security #software_development #security #software_engineering
Medium
Inside a DevSecOps CI/CD Pipeline: How Automated Security Checks Protect Every Commit
A practical walkthrough of the GitHub Actions security pipeline implemented for a vulnerable fintech microservices application.
22 views
Daily Writeups
⤷ Title: WhoAmI
════════════════════════
𐀪 Author: Raphael Lima
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 01:10:12 GMT
════════════════════════
⌗ Tags: #infosec #career_change #ethical_hacking #tryhackme #cybersecurity
Medium
WhoAmI
A ‘97-born Italian-Brazilian polyglot currently living in Italy and hoarding enough career titles (architect, chef, English teacher, and…
24 views
Daily Writeups
⤷ Title: The Brochure | TryHackMe
════════════════════════
𐀪 Author: Edson M
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 01:08:48 GMT
════════════════════════
⌗ Tags: #ciberseguridad #tryhackme_walkthrough #tryhackme_writeup #tryhackme
Medium
The Brochure | TryHackMe
Introducción
The Brochure es un laboratorio de la plataforma TryHackMe, lanzado como parte de del evento Hacker Holidays, en éste write-up…
26 views
Daily Writeups
⤷ Title: Kimi K3 Opens Weights as Agents Push Past Sandbox Boundaries
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 03:58:09 +0000
════════════════════════
⌗ Tags: #Technology #AgentENV #AI safety #Kimi K3 #Moonshot AI #Open Weights
Daily CyberSecurity
Kimi K3 Opens Weights as Agents Push Past Sandbox Boundaries
Moonshot AI’s much-watched Kimi K3 model has opened its weights. K3 is the world’s first 3T-class open-weight model. Its specifications are striking. The model spans 2.8T total paramet…
25 views
Daily Writeups
⤷ Title: Windows 11 Experimental Builds Face a Time Bomb on August 11
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 03:38:51 +0000
════════════════════════
⌗ Tags: #Windows #Build 29634 #Microsoft #Time Bomb #Windows 11 #Windows Insider
Daily CyberSecurity
Windows 11 Experimental Builds Face a Time Bomb on August 11
Windows 10 and 11 preview builds carry a built-in dedicated digital certificate that controls their expiry date. Because of this, older builds often trigger a so-called time bomb once they expire.…
17 views
Daily Writeups
⤷ Title: Google Quietly Ships Native Chrome for Linux Arm64 With DRM
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 03:08:56 +0000
════════════════════════
⌗ Tags: #Technology #chrome #google chrome #Linux ARM64 #Raspberry Pi #Widevine
Daily CyberSecurity
Google Quietly Ships Native Chrome for Linux Arm64 With DRM
Do you run the desktop edition of Raspberry Pi OS? If so, Google Chrome’s native Chrome for Linux Arm64 build may be welcome news. Google promised an Arm64 Linux version back in March, yet i…
12 views
Daily Writeups
⤷ Title: Debian Debates Whether to Allow AI-Assisted Code Contributions
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 02:54:50 +0000
════════════════════════
⌗ Tags: #Linux #AI Code #Debian #Generative AI #open_source
Daily CyberSecurity
Debian Debates Whether to Allow AI-Assisted Code Contributions
The open-source operating system Debian is now debating a thorny question. It concerns using AI models to submit code and other contributions. The vote remains in its discussion phase, which opene…
9 views
Daily Writeups
⤷ Title: NVIDIA and Microsoft Launch Open Secure AI Alliance After Hack
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 02:40:53 +0000
════════════════════════
⌗ Tags: #Technology #cybersecurity #Microsoft #nvidia #Open Secure AI Alliance #Open_Source AI
Daily CyberSecurity
NVIDIA and Microsoft Launch Open Secure AI Alliance After Hack
NVIDIA founder Jensen Huang recently announced a new coalition. Together with Microsoft and others, the company has formed the Open Secure AI Alliance. Its main goal is to raise the level of cyber…
8 views
Daily Writeups
⤷ Title: libssh2 Flaws Let Malicious SSH Servers Corrupt Client Memory
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 02:19:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_66032 #CVE_2026_66033 #CVE_2026_66034 #CVE_2026_66035 #double_free #Heap Buffer Overflow #libssh2 #libssh2 vulnerabilities #malicious SSH server #SFTP #SSH Client #VulnCheck
Daily CyberSecurity
libssh2 Flaws Let Malicious SSH Servers Corrupt Client Memory
TL;DR Four new libssh2 vulnerabilities put SSH and SFTP clients at risk. Each one lets a malicious SSH server corrupt memory on the machine that connects to it. VulnCheck disclosed the flaws on Ju…
11 views
Daily Writeups
⤷ Title: Progress Patches Five Kemp LoadMaster Vulnerabilities
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 02:12:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ADC Security #CVE_2026_59686 #CVE_2026_59687 #CVE_2026_59688 #CVE_2026_59689 #CVE_2026_59690 #Kemp LoadMaster #LoadMaster vulnerabilities #os command injection #privilege escalation #Progress Kemp LoadMaster
Daily CyberSecurity
Progress Patches Five Kemp LoadMaster Vulnerabilities
TL;DR Progress fixed five Kemp LoadMaster vulnerabilities in a July 2026 bulletin. Three allow OS command injection, and two allow privilege escalation. Each one can lead to full system compromise…
12 views